CVE-2019-12448

CVE Details

Release Date:2019-05-29

Description


An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement query_info_on_read/write.

See more information about CVE-2019-12448 from MITRE CVE dictionary and NIST NVD


CVSS v3.0 metrics


NOTE: The following CVSS v3.0 metrics and score provided are preliminary and subject to review.

Base Score: 8.1 Base Metrics: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Access Vector: Network Attack Complexity: High
Privileges Required: None User Interaction: None
Scope: Unchanged Confidentiality Impact: High
Integrity Impact: High Availability Impact: High

Errata information


PlatformErrataRelease Date
Oracle Linux version 8 (LibRaw)ELSA-2020-17662020-05-05
Oracle Linux version 8 (accountsservice)ELSA-2020-17662020-05-05
Oracle Linux version 8 (appstream-data)ELSA-2020-17662020-05-05
Oracle Linux version 8 (clutter)ELSA-2020-17662020-05-05
Oracle Linux version 8 (evince)ELSA-2020-17662020-05-05
Oracle Linux version 8 (gdm)ELSA-2020-17662020-05-05
Oracle Linux version 8 (gjs)ELSA-2020-17662020-05-05
Oracle Linux version 8 (gnome-boxes)ELSA-2020-17662020-05-05
Oracle Linux version 8 (gnome-control-center)ELSA-2020-17662020-05-05
Oracle Linux version 8 (gnome-menus)ELSA-2020-17662020-05-05
Oracle Linux version 8 (gnome-online-accounts)ELSA-2020-17662020-05-05
Oracle Linux version 8 (gnome-remote-desktop)ELSA-2020-17662020-05-05
Oracle Linux version 8 (gnome-session)ELSA-2020-17662020-05-05
Oracle Linux version 8 (gnome-settings-daemon)ELSA-2020-17662020-05-05
Oracle Linux version 8 (gnome-shell)ELSA-2020-17662020-05-05
Oracle Linux version 8 (gnome-software)ELSA-2020-17662020-05-05
Oracle Linux version 8 (gnome-terminal)ELSA-2020-17662020-05-05
Oracle Linux version 8 (gnome-tweaks)ELSA-2020-17662020-05-05
Oracle Linux version 8 (gsettings-desktop-schemas)ELSA-2020-17662020-05-05
Oracle Linux version 8 (gtk3)ELSA-2020-17662020-05-05
Oracle Linux version 8 (libvncserver)ELSA-2020-17662020-05-05
Oracle Linux version 8 (libxslt)ELSA-2020-17662020-05-05
Oracle Linux version 8 (mozjs52)ELSA-2020-17662020-05-05
Oracle Linux version 8 (mozjs60)ELSA-2020-17662020-05-05
Oracle Linux version 8 (mutter)ELSA-2020-17662020-05-05
Oracle Linux version 8 (nautilus)ELSA-2020-17662020-05-05
Oracle Linux version 8 (vala)ELSA-2020-17662020-05-05
Oracle Linux version 8 (vinagre)ELSA-2020-17662020-05-05



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete